As advanced V2X applications emerge in the connected and autonomous vehicle (CAV), the data communications between in-vehicle end-devices and outside nodes increase, which make the end-to-end (E2E) security to in-vehicle end-devices as the urgent issue to be handled. However, the E2E security with fine-grained access control still remains as a challenging issue for resource-constrained end-devices since the existing security solutions require complicated key management and high resource consumption. Therefore, we propose a practical and secure vehicular communication protocol for the E2E security based on a new attribute-based encryption (ABE) scheme. In our scheme, the outsourced computation is provided for encryption, and the computation cost for decryption constantly remains small, regardless of the number of attributes. The policy privacy can be ensured by the proposed ABE to support privacy-sensitive V2X applications, and the existing identity-based signature for outsourced signing is newly reconstructed. Our scheme achieves the confidentiality, message authentication, identity anonymity, unlinkability, traceability, and reconfigurable outsourced computation, and we also show the practical feasibility of our protocol via the performance evaluation.
翻译:随着联网自动驾驶车辆(CAV)中先进V2X应用的出现,车载终端设备与外部节点间的数据通信量日益增加,这使得车载终端设备的端到端(E2E)安全成为亟待解决的问题。然而,对于资源受限的终端设备而言,实现具备细粒度访问控制的端到端安全仍具有挑战性,因为现有安全方案需要复杂的密钥管理且资源消耗较高。为此,我们基于一种新型属性基加密(ABE)方案,提出了一种实用且安全的车载通信协议以实现端到端安全。在该方案中,加密运算通过外包计算实现,且解密计算开销不受属性数量影响始终保持恒定。该ABE方案可保障策略隐私性以支持隐私敏感的V2X应用,同时重构了现有用于外包签名的基于身份签名机制。本方案可实现机密性、消息认证、身份匿名性、不可关联性、可追踪性及可重构外包计算,并通过性能评估验证了协议的实际可行性。